Rutetabell
Tematurer
Vår meny
Bildegalleri
Nyhetsbrev

Privacy statement for ODS

PRIVACY POLICY FOR AS OPLANDSKE DAMPSKIBSSELSKAP

(Updated in accordance with the Norwegian Electronic Communications Act 2025 (Ekomloven) and the Personal Data Act/GDPR)

1. About this Privacy Policy

This privacy policy explains how AS Oplandske Dampskibsselskap (hereafter “we”) collect and process personal data when you visit our websites or use our services.

The privacy policy applies to the website www.skibladner.no and associated digital services.
Separate data processing agreements may apply to specific products and services.

2. Data Controller

AS Oplandske Dampskibsselskap
Org. no.: 915 025 064
Skibladnerkontoret, P.O. Box 26, 2802 Gjøvik, Norway
Telephone: +47 61 14 40 80
E-mail: skibladner@skibladner.no

The general manager is the data controller.

3. Explanation of Key Terms

Personal data
Any information that can be linked to an identifiable individual, such as name, contact information, IP address, purchase history, or information submitted through forms.

Processing
Any operation performed on personal data, such as collection, storage, structuring, or disclosure.

Data controller
The entity that determines the purpose of processing and how the processing is carried out.

4. Personal Data We Process

We may process the following categories of information, depending on which services you use and what information you provide:

  • Name and contact details

  • Company name (for business-related bookings)

  • Address

  • Email address and telephone number

  • Services/bookings and transaction history

  • Payment and invoicing information (via our service providers)

  • Information submitted via contact forms

  • IP address and technical information when you visit our website

  • Information from the booking services Travel Wire and Citybreak (name, address, phone, email and any other information you provide)

5. Purpose and Legal Basis

5.1 Customer management and bookings

To process tickets, bookings, customer service and warranty matters.
Legal basis: Contract or legitimate interest.

5.2 Administration, operations, and accounting

Processing of data in CRM, accounting systems and case management.
Legal basis: Legal obligation and legitimate interest.

5.3 Communication (email and telephone)

Processing of enquiries, customer dialogue and service.
Legal basis: Legitimate interest or contract.

5.4 Newsletters

Sending relevant information to subscribers.
Legal basis: Consent.

5.5 Use of the website

To provide essential website functionality and security.
Legal basis: Legitimate interest (strictly necessary functions).

5.6 Analytics and statistics (non-essential cookies)

To understand user behaviour and improve the website.
This only takes place if you provide active consent through our cookie banner.
Legal basis: Consent (Ekomloven § 3-15).

6. Cookies

(Updated in accordance with Ekomloven 2025 – stricter requirements)

When you visit our website, cookies are only placed on your device if you have given active consent—except for strictly necessary cookies.

6.1 Categories of Cookies

Necessary cookies

Ensure basic functionality of the website.
Placed without consent.

Functional cookies

Improve the user experience.
Require consent.

Statistics / Analytics cookies (Google Analytics)

Used to understand how the website is used.
Require consent and are blocked until consent is provided.

Marketing cookies (if applicable)

We currently do not use targeted marketing cookies.

6.2 Tools Used

Destinet CMS

Uses cookies for technical operations and statistics.

Google Analytics (GA4)

Used for anonymised statistics.
Before consent is given, the following are blocked:

  • Collection of IP addresses

  • User identifiers

  • Third-party tracking

Data storage in GA4 is up to 14 months (standard), or shorter if configured.

Data may be transferred to Google LLC in the USA according to the current legal transfer mechanisms (EU–US Data Privacy Framework). This requires consent.

6.3 Consent and Withdrawal

  • Cookies are not placed until you have given active consent.

  • You may withdraw or change your consent at any time via the “Change consent” link at the bottom of the website.

7. Collection via Online Forms

When you submit a form on the website, the information is stored in Destinet CMS for up to 30 days before being automatically deleted or transferred to internal systems.

8. Sharing of Personal Data

We only share personal data with service providers who assist us in operating our services:

  • Leonberg Reklamebyrå AS – website development and maintenance

  • Destino – operation of the Destinet CMS platform

  • Lykketal – accounting services via Tripletex

  • Travel Wire and Citybreak – booking and archiving systems

All providers have valid data processing agreements with us, regulating access, security and processing.

9. Retention Period

We retain personal data only for as long as necessary for the stated purpose, or as required by law.

  • Form submissions: stored for up to 30 days

  • Booking and customer data: in accordance with accounting legislation and internal routines

  • Email: deleted continually and reviewed at least annually

  • Analytics (Google Analytics): stored for up to 14 months after consent

Data may be deleted earlier upon request.

10. Your Rights

You have the right to:

  • receive information about how we process your data

  • access the data we hold about you

  • have incorrect or incomplete data corrected

  • request deletion of data that we no longer have a legal basis to retain

  • request restriction of processing

  • object to processing based on legitimate interest

  • receive a copy of data you have provided in a portable format

  • withdraw your consent at any time

To exercise your rights, contact us at skibladner@skibladner.no.

If you believe we process your personal data unlawfully, you may lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), but we kindly ask that you contact us first so we can help clarify the matter.

11. Security Incidents

If a personal data breach occurs, we will notify the Data Protection Authority within the required deadline.
We have internal procedures to detect, handle and limit any consequences of unauthorised access.

12. Changes to This Privacy Policy

We may update this privacy policy when necessary. The latest version will always be available at www.skibladner.no.
If significant changes are made, you will be notified.